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ABSTRACT 

The present invention provides a means for determining authenticity of a 
combination of files which are downloaded to a mobile station, and which are 
related to one another. To achieve the stated object, in a system according to the 
present invention, mobile station 16, which is capable of running a Java-APP, 
receives an ADF from CP server device 12. Then mobile station 16 receives a 
SDF from trusted server device 18, which is identified by data contained in the 
ADF. Mobile station 16 calculates a hash value of certificate data contained in the 
ADF, and verifies whether the calculated hash value of the certificate data and a 
hash value of the certificate data which is contained in the SDF are identical to 
each other. Next, mobile station 16 receives a JAR file from CP server device 12. 
Mobile station 16 calculates a hash value of the JAR file, and verifies whether the 
calculated hash value of the JAR file and a hash value of the JAR file contained in 
the ADF are identical to each other. 


